Source: wireshark Version: 2.6.8-1 Severity: grave Tags: security upstream Forwarded: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15778 Control: found -1 2.6.7-1~deb9u1
Hi, The following vulnerability was published for wireshark. CVE-2019-12295[0]: | In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the | dissection engine could crash. This was addressed in epan/packet.c by | restricting the number of layers and consequently limiting recursion. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2019-12295 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12295 [1] https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15778 [2] https://www.wireshark.org/security/wnpa-sec-2019-19.html Regards, Salvatore
